funsec mailing list archives

Re: How to Obtain Free, Detailed .name WHOIS Information


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Mon, 1 Oct 2007 00:21:16 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sorry for following up on my own post, but I've already been
informed by several people that this method doesn't always work,
dependent on registrar.

Especially when the registrar does not allow querying their own
WHOIS services for details (e.g. 1 and 1, etc.) :-)

And somehow, I don't get the feeling that Bad Guys will use the
registrars that allow this "back-door discovery" (nor would the
information probably be very useful)...

$.02,

- - ferg



- -- "Paul Ferguson" <fergdawg () netzero net> wrote:


Via The DomainTools Blog.

[snip]

Wired Magazine shows why Dot-Name’s whois policy is bad. The registry is
based in the UK and they claim detailed whois violates UK privacy policy.
While the UK government has never prosecuted a case against a registry
based in the UK they still convinced ICANN that they should be allowed to
bend the mandated whois service registries are required to run. So ICANN
has allowed a special exception to the Dot-Name Registry. If you want
detailed access to Dot-name whois be prepared to pay $2 for it if you go
directly to the Registry. That will get you five passwords that are good
for 24 hours. So I guess the UK privacy policy doesn’t apply if you make
people pay for whois? I just don’t follow that argument.

Either way, I want to let people know about a special back door! You can
get detailed Dot-Name whois for free.

[snip]

More:
http://blog.domaintools.com/2007/09/dot-name-free-detailed-whois-records/

- - ferg

p.s. Nice pointer, Jay!

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFHAD14q1pz9mNUZTMRAhSaAKCgTgFUOvwI651434YHx97+y7xkvwCghpiy
9me1JHRJh1+EBhzWXCEa/Dw=
=DZd7
-----END PGP SIGNATURE-----




--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: